AI Box IT & network specification

No other services are opened. You can place the box on its own network segment (VLAN) and allow only port 8000 from staff computers.

• Reading documents, searching and answering questions all run on the box itself. No document text, question or answer is sent to any outside AI service.
• The box works with no internet connection at all. The only optional outbound traffic is the update check above.
• Updates are digitally signed. The box refuses any update whose signature does not match, and takes a restore point before installing so it can be rolled back.

• Uploaded files: stored on the box's own drive.
• Shared folders (Windows share / NAS): the original files stay on your server. The box connects read-only — it cannot change, move or delete them — and keeps only the extracted text and search index.
• Microsoft 365: the box does not log in to your Microsoft account. Sync the SharePoint or OneDrive library to an office server with Microsoft's own OneDrive app, then connect that folder as a shared folder.
• Drive encryption: not switched on by default. Full-disk encryption can be set up at installation on request; agree this with us before delivery.
• Deleting: removing a document deletes its text and search entries, so it stops appearing in answers.

• Every staff member signs in with their own account. Roles control who can upload, manage folders or change settings.
• Restricted folders are hidden from people without access in every list, search, answer and document view.
• A shared folder is read with one service account. Windows folder permissions are not copied automatically — connect each department's folder into its own restricted AI Box folder.
• Admin actions (sign-ins, uploads, deletions, setting changes) are recorded in an activity log.

• The box never sends anything to us on its own. If you need help, an admin downloads a support report and chooses whether to send it.
• Before the report is created, document text, file names, chat messages, names, emails, passwords, keys and office IP addresses are removed. Your IT team can open and read the report before it is sent.

• No independent security audit or certification (such as SOC 2 or ISO 27001) has been completed yet.
• Very large archives are read in stages. We recommend a pilot on one department's folder first.
• Answers come with sources, but staff should check the cited page before relying on it.